netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-03 18:48:50 +00:00
parent 11006880f4
commit 35246cdaf8
165 changed files with 2364 additions and 416 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/06/GHSA-22f8-6qq6-p38x/GHSA-22f8-6qq6-p38x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22f8-6qq6-p38x",
"modified": "2024-06-22T00:30:56Z",
"modified": "2024-07-03T18:46:20Z",
"published": "2024-06-22T00:30:56Z",
"aliases": [
"CVE-2014-5470"
],
"details": "Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-21T22:15:10Z"
advisories/unreviewed/2024/06/GHSA-252v-9w3r-w4vm/GHSA-252v-9w3r-w4vm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-252v-9w3r-w4vm",
"modified": "2024-06-25T06:30:39Z",
"modified": "2024-07-03T18:46:56Z",
"published": "2024-06-25T06:30:39Z",
"aliases": [
"CVE-2024-4757"
],
"details": "The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T06:15:11Z"
advisories/unreviewed/2024/06/GHSA-2g4v-8vvw-r8m9/GHSA-2g4v-8vvw-r8m9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2g4v-8vvw-r8m9",
"modified": "2024-06-26T21:32:18Z",
"modified": "2024-07-03T18:47:04Z",
"published": "2024-06-26T21:32:18Z",
"aliases": [
"CVE-2024-39243"
],
"details": "An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-75"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-26T20:15:16Z"
advisories/unreviewed/2024/06/GHSA-2vx6-mxq6-c2rw/GHSA-2vx6-mxq6-c2rw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2vx6-mxq6-c2rw",
"modified": "2024-06-21T12:31:20Z",
"modified": "2024-07-03T18:46:19Z",
"published": "2024-06-21T12:31:20Z",
"aliases": [
"CVE-2024-38623"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Use variable length array instead of fixed size\n\nShould fix smatch warning:\n\tntfs_set_label() error: __builtin_memcpy() 'uni->name' too small (20 vs 256)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-21T11:15:11Z"
advisories/unreviewed/2024/06/GHSA-34x7-h5wm-79jf/GHSA-34x7-h5wm-79jf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-34x7-h5wm-79jf",
"modified": "2024-06-26T21:32:16Z",
"modified": "2024-07-03T18:47:02Z",
"published": "2024-06-26T21:32:16Z",
"aliases": [
"CVE-2024-33327"
],
"details": "A cross-site scripting (XSS) vulnerability in the component UrlAccessibilityEvaluation.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contentHtml parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-26T19:15:13Z"
advisories/unreviewed/2024/06/GHSA-354c-38ff-3cw6/GHSA-354c-38ff-3cw6.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-354c-38ff-3cw6",
"modified": "2024-06-25T03:31:07Z",
"modified": "2024-07-03T18:46:48Z",
"published": "2024-06-25T03:31:07Z",
"aliases": [
"CVE-2024-37002"
],
"details": "A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-457"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T03:15:10Z"
advisories/unreviewed/2024/06/GHSA-372p-q8pm-xrrr/GHSA-372p-q8pm-xrrr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-372p-q8pm-xrrr",
"modified": "2024-06-24T21:33:21Z",
"modified": "2024-07-03T18:46:35Z",
"published": "2024-06-24T21:33:21Z",
"aliases": [
"CVE-2024-38897"
],
"details": "WAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-202"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-24T21:15:26Z"
advisories/unreviewed/2024/06/GHSA-37hm-8cwf-jp7f/GHSA-37hm-8cwf-jp7f.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-37hm-8cwf-jp7f",
"modified": "2024-06-25T03:31:07Z",
"modified": "2024-07-03T18:46:47Z",
"published": "2024-06-25T03:31:07Z",
"aliases": [
"CVE-2024-37001"
],
"details": "[A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T03:15:10Z"
advisories/unreviewed/2024/06/GHSA-3fjc-pjgm-cw7f/GHSA-3fjc-pjgm-cw7f.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3fjc-pjgm-cw7f",
"modified": "2024-06-24T21:33:21Z",
"modified": "2024-07-03T18:46:33Z",
"published": "2024-06-24T21:33:21Z",
"aliases": [
"CVE-2024-37678"
],
"details": "Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-24T20:15:10Z"
advisories/unreviewed/2024/06/GHSA-3w26-g558-6q3x/GHSA-3w26-g558-6q3x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3w26-g558-6q3x",
"modified": "2024-06-27T06:32:47Z",
"modified": "2024-07-03T18:47:04Z",
"published": "2024-06-27T06:32:47Z",
"aliases": [
"CVE-2024-4704"
],
"details": "The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL of their choosing.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-601"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-27T06:15:14Z"
advisories/unreviewed/2024/06/GHSA-3x3g-7ggq-rm95/GHSA-3x3g-7ggq-rm95.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3x3g-7ggq-rm95",
"modified": "2024-06-25T03:31:07Z",
"modified": "2024-07-03T18:46:47Z",
"published": "2024-06-25T03:31:07Z",
"aliases": [
"CVE-2024-23144"
],
"details": "A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk applications, can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T02:15:11Z"
advisories/unreviewed/2024/06/GHSA-3x55-2c2w-5c9f/GHSA-3x55-2c2w-5c9f.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3x55-2c2w-5c9f",
"modified": "2024-06-24T21:33:21Z",
"modified": "2024-07-03T18:46:35Z",
"published": "2024-06-24T21:33:21Z",
"aliases": [
"CVE-2024-38892"
],
"details": "An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-202"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-24T21:15:26Z"
advisories/unreviewed/2024/06/GHSA-489p-q5cq-r62h/GHSA-489p-q5cq-r62h.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-489p-q5cq-r62h",
"modified": "2024-06-25T06:30:39Z",
"modified": "2024-07-03T18:46:52Z",
"published": "2024-06-25T06:30:39Z",
"aliases": [
"CVE-2024-23158"
],
"details": "A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T04:15:14Z"
advisories/unreviewed/2024/06/GHSA-4cqv-cv9m-26q8/GHSA-4cqv-cv9m-26q8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4cqv-cv9m-26q8",
"modified": "2024-06-26T21:32:18Z",
"modified": "2024-07-03T18:47:04Z",
"published": "2024-06-26T21:32:18Z",
"aliases": [
"CVE-2024-23766"
],
"details": "An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway (or at least most of its modules). An attacker can use this feature to carry out a denial of service attack by continuously sending GET requests to that URL.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-598"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-26T21:15:12Z"
advisories/unreviewed/2024/06/GHSA-4fc7-mvrr-wv2c/GHSA-4fc7-mvrr-wv2c.json
+6 -3
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/06/GHSA-4hgg-qgc6-rv76/GHSA-4hgg-qgc6-rv76.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4hgg-qgc6-rv76",
"modified": "2024-06-25T06:30:39Z",
"modified": "2024-07-03T18:46:50Z",
"published": "2024-06-25T06:30:39Z",
"aliases": [
"CVE-2024-23154"
],
"details": "A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T04:15:13Z"
advisories/unreviewed/2024/06/GHSA-4m8x-4m59-3q64/GHSA-4m8x-4m59-3q64.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4m8x-4m59-3q64",
"modified": "2024-06-25T21:31:17Z",
"modified": "2024-07-03T18:46:57Z",
"published": "2024-06-25T21:31:17Z",
"aliases": [
"CVE-2024-21741"
],
"details": "GigaDevice GD32E103C8T6 devices have Incorrect Access Control.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T21:15:57Z"
advisories/unreviewed/2024/06/GHSA-4pj4-pm6x-xf9x/GHSA-4pj4-pm6x-xf9x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4pj4-pm6x-xf9x",
"modified": "2024-06-25T00:34:46Z",
"modified": "2024-07-03T18:46:40Z",
"published": "2024-06-25T00:34:46Z",
"aliases": [
"CVE-2023-50029"
],
"details": "PHP Injection vulnerability in the module \"M4 PDF Extensions\" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate() method.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-24T23:15:10Z"
advisories/unreviewed/2024/06/GHSA-4w8c-j9fj-jw7x/GHSA-4w8c-j9fj-jw7x.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4w8c-j9fj-jw7x",
"modified": "2024-06-25T03:31:07Z",
"modified": "2024-07-03T18:46:47Z",
"published": "2024-06-25T03:31:07Z",
"aliases": [
"CVE-2024-23143"
],
"details": "A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-125"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T02:15:11Z"
advisories/unreviewed/2024/06/GHSA-549r-m25h-hvpx/GHSA-549r-m25h-hvpx.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,

Some files were not shown because too many files have changed in this diff Show More